$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: w1MiOP0Cp2YK5d4EHCA660LbuQdHlpSjT+Yn30/UJJE= Subject key identifier: F2:2C:DE:6B:4E:3C:FA:12:A9:4C:ED:09:3E:73:4D:44:D0:12:03:EB Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 03CB Signing time: Sat 09 Aug 2025 01:09:22 +0000 Manifest this update: Sat 09 Aug 2025 01:09:22 +0000 Manifest next update: Sat 16 Aug 2025 01:09:22 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: C87Axb8TqVwbenlL0R3JlYzKWUqYgGVCySo3B7nzdLM=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: o33RNCZroDwsAJGcMgsni5M3q2cYV8AkaewWNhrky5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: Aug 9 01:09:22 2025 GMT Not After : Aug 16 01:09:22 2025 GMT Subject: CN=68969fc2-483a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:df:c3:4c:1c:bb:b3:f2:4b:a6:fe:d8:c9: 6f:2c:00:12:0c:21:ef:e8:96:a1:a1:e8:01:83:4c: 48:9d:7e:2d:32:a8:03:fa:9e:e5:5f:68:72:d8:cf: 18:a5:6e:73:7e:b4:53:cf:09:4c:5c:96:19:c7:bb: 87:15:c1:d7:25:ec:c0:23:17:b2:21:ed:fa:39:3a: 25:5d:a2:a5:52:75:f4:a7:ee:eb:8f:51:b5:ea:74: 1e:a1:4b:7a:00:65:c4:7f:5a:98:d4:fa:ff:f8:c2: aa:d4:a2:6d:80:c7:6b:fe:92:b3:9a:06:be:22:bd: 71:5b:59:40:e1:71:a2:db:3c:2d:f7:1f:ce:36:fa: 71:4e:9a:0d:95:c7:17:8c:30:3b:1c:04:54:64:16: e0:0f:a8:6b:27:6f:ac:4d:f2:bf:c1:5d:e8:c6:34: 18:cd:0e:af:1a:ba:ae:b6:ee:62:18:89:9c:da:90: 53:af:dd:6e:d3:52:06:ac:3a:dd:bd:bf:0d:b4:7e: 25:6d:57:8b:9a:09:67:7c:af:7c:6f:d4:b3:aa:69: 2a:02:2a:bc:9c:d1:a9:7b:15:79:3a:09:00:67:3a: 18:54:4a:03:08:a3:4f:57:93:92:a5:ff:b6:65:69: bc:e2:27:20:b1:99:16:69:b4:97:69:63:e4:f1:26: 4e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2C:DE:6B:4E:3C:FA:12:A9:4C:ED:09:3E:73:4D:44:D0:12:03:EB X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b8:f1:93:5c:81:80:ed:1b:9c:c4:b6:31:06:23:38:21:8f: 5e:e5:07:92:1a:05:e0:bf:71:8e:0d:81:4c:95:b3:7c:f4:74: d7:b8:6e:e4:ac:29:50:6c:28:b1:9b:1b:55:e4:26:a5:02:03: ca:97:f2:bc:18:b0:cb:f2:7c:77:91:1d:1c:ce:1d:c3:27:1f: da:1c:d9:af:14:ef:59:6b:df:d0:64:68:bd:d4:67:91:2f:d8: 31:18:d3:97:0f:63:44:0c:ef:96:16:9b:85:9d:c6:e7:2f:b1: 48:b4:e9:cf:0f:93:a0:da:ac:6c:bd:ac:e8:1e:be:35:08:17: 7d:4d:ea:c3:5d:9b:47:08:26:8c:67:95:9a:ac:2e:b1:b2:56: 78:9e:fd:4d:6a:46:64:af:cd:05:49:05:03:da:65:05:50:a4: e7:63:e6:e5:cb:28:89:3e:b8:e7:78:35:23:f9:a5:5c:17:41: 76:6d:28:53:c6:7b:3d:f0:4c:81:d2:84:de:dd:16:09:b5:41: 7f:3b:04:2c:c4:c4:91:b4:37:f0:d0:81:a9:c3:15:16:81:cd: a8:c5:ad:85:de:93:57:d3:ee:d8:e7:92:3d:9f:9e:a3:56:72: c2:cd:cb:fa:32:f7:63:4a:5c:cf:b1:f7:b5:45:1a:b3:a5:15: 59:c8:8e:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjUwODA5MDEwOTIyWhcNMjUwODE2MDEwOTIyWjAYMRYwFAYD VQQDEw02ODk2OWZjMi00ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7Hfw0wcu7PyS6b+2MlvLAASDCHv6JahoegBg0xInX4tMqgD+p7lX2hy2M8Y pW5zfrRTzwlMXJYZx7uHFcHXJezAIxeyIe36OTolXaKlUnX0p+7rj1G16nQeoUt6 AGXEf1qY1Pr/+MKq1KJtgMdr/pKzmga+Ir1xW1lA4XGi2zwt9x/ONvpxTpoNlccX jDA7HARUZBbgD6hrJ2+sTfK/wV3oxjQYzQ6vGrqutu5iGImc2pBTr91u01IGrDrd vb8NtH4lbVeLmglnfK98b9SzqmkqAiq8nNGpexV5OgkAZzoYVEoDCKNPV5OSpf+2 ZWm84icgsZkWabSXaWPk8SZOmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIs3mtO PPoSqUztCT5zTUTQEgPrMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFuPGTXIGA7RucxLYxBiM4IY9e5QeSGgXgv3GODYFMlbN89HTXuG7k rClQbCixmxtV5CalAgPKl/K8GLDL8nx3kR0czh3DJx/aHNmvFO9Za9/QZGi91GeR L9gxGNOXD2NEDO+WFpuFncbnL7FItOnPD5Og2qxsvazoHr41CBd9TerDXZtHCCaM Z5WarC6xslZ4nv1NakZkr80FSQUD2mUFUKTnY+blyyiJPrjneDUj+aVcF0F2bShT xns98EyB0oTe3RYJtUF/OwQsxMSRtDfw0IGpwxUWgc2oxa2F3pNX0+7Y55I9n56j VnLCzcv6MvdjSlzPsfe1RRqzpRVZyI69 -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:17 2025 by rpki-client